CVE-2022-40109

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

Code injection

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

CVE-2022-40109

The CVE-2022-40109 entry concerns the TOTOLINK A3002R router (firmware TOTOLINK-A3002R-He-V1.1.1-B20200824.0128). The vulnerability is insecure permissions via the /bin/boa binary, affecting the device’s security at the level of file/command permissions. CVSS 3.1/CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U...

CVE-2022-40109

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

PT-2022-25211 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 Description: The issue concerns insecure permissions via the binary /bin/boa. Recommendations: For TOTOLINK A3002R version TOTOLINK-A3002R-He-V1.1.1-B20200824.0128, at the momen...

Apache ShenYu Admin has insecure permissions

Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3. Version 2.5.0 contains a patch for this issue...

CVE-2022-37435

Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3...

CVE-2022-37435

Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3...

CVE-2022-37435

CVE-2022-37435 concerns Apache ShenYu Admin insecure permissions that may let a low-privilege administrator modify a high-privilege administrator’s password, enabling privilege escalation. Affected versions: ShenYu Admin 2.4.2 and 2.4.3. Root cause, per multiple sources, is improper/unsafe permis...

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-22475

Summary IBM TRIRIGA Application Platform discloses CVE-2020-22475 Vulnerability Details CVEID:CVE-2020-22475 DESCRIPTION: Tasks could provide weaker than expected security, caused by insecure permissions in VoiceCommandActivity. By sending a specially-crafted request, a remote attacker could...

CVE-2022-36521

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

Code injection

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

CVE-2022-36521

CVE-2022-36521 affects cskefu v7.0.1, where insecure permissions allow unauthenticated attackers to arbitrarily add administrator accounts. The issue is rooted in permission checks within the application, enabling privilege escalation at the admin-creation step. Multiple sources (NVD/Red Hat/CVE ...

CVE-2022-36521

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts...

PT-2022-23442 · Cskefu · Cskefu

Name of the Vulnerable Software and Affected Versions: cskefu version 7.0.1 Description: The issue is related to insecure permissions, allowing unauthenticated attackers to add administrator accounts arbitrarily. Recommendations: For cskefu version 7.0.1, update to a version that addresses the...

CVE-2021-37289

Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etcro/web/syscmd.asp...

CVE-2021-37289

Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etcro/web/syscmd.asp...

CVE-2021-37289

Planex MZK-DP150N firmware versions 1.42/1.43 expose insecure permissions in the administration interface, allowing a remote attacker to execute system commands as root via etc_ro/web/syscmd.asp. The issue stems from a privileged path exposure in the config UI, with a potential impact of arbitrar...

CVE-2021-37289

Insecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows attackers to execute system command as root via etcro/web/syscmd.asp...

GHSA-7QQ9-9G2W-56F9 Improper Privilege Management in com.xuxueli:xxl-job

XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low Privilege account...